ab3b6110f2231c15c40b4576098bd12e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab3b6110f2231c15c40b4576098bd12e
Size

83KB
MD5

ab3b6110f2231c15c40b4576098bd12e
SHA1

de3d1488125232900255bab472bcc20fabcda2a4
SHA256

4b2f18cde6c668cc196647f68eb455d98a6bf489b56c164f035153b31d09d070
SHA512

1b7aa4da9d47370c1a7d323fdbd34bbcb61d44c1349206a2e871772d78fbca2cd2e7369d9ec1cd1a0b9f59c117cd33e04e5e22771e9c0e1fc30fb800093a2f60
SSDEEP

1536:IL7TOFiC8WYg+BGe6+WtOANYqgntckM9jEErxTWDTMqhGKYIZTET8bDQ:I5CmVLW8TTM9jBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab3b6110f2231c15c40b4576098bd12e

Files

ab3b6110f2231c15c40b4576098bd12e
.exe windows:4 windows x86 arch:x86

b374418f3e31bdbda153548efd6a2ef1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
GetBinaryTypeA
GetPrivateProfileSectionA
IsProcessorFeaturePresent
VirtualBufferExceptionHandler
UnregisterWaitEx
SetProcessDEPPolicy
LoadResource
SetDefaultCommConfigW
IsDebuggerPresent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE